Final Year Project Networking
Final Year Project Networking
Project Report On
Integrated LAN Management using Optical and Ethernet Networks with
Bandwidth Control, Optimization, and SNMP Monitoring
Submitted To
MD Badiuzzaman Biplob
Instructor
Department of Computer Technology
Daffodil Institute of IT, Chattogram
Submitted By
Innovative Thinkers Group
Batch:15th
Daffodil Institute of IT, Chattogram
Daffodil Tower, 94 Sheikh Mujib Rd
Group Profile
5 Al Faysal 590971
3
TABLE OF CONTENTS
INTRODUCTION .......................................................................................................................... 1
PROJECT DESCRIPTION ............................................................................................................ 2
METHODOLOGY ......................................................................................................................... 3
3.1 Hardware Setup and Initial Configuration ............................................................................ 3
3.1.1 Powering the Router & Connecting to a Computer ........................................................ 3
3.1.2 Accessing & Configuring Network Interfaces with WinBox ......................................... 4
3.1.3 Creating a Bridge for LAN Ports .................................................................................... 5
3.2 Setting Up IP Addresses, Firewalls and Routes.................................................................... 7
3.2.1 Setting Up IP Addresses..................................................................................................... 7
3.2.2 Setting up Firewalls ........................................................................................................ 8
3.3.3 Adding IP Routes .......................................................................................................... 10
3.4 Bandwidth Control Configuration ...................................................................................... 11
3.5 Checking LAN And WAN Connection .............................................................................. 12
3.6 SNMP Integration ............................................................................................................... 14
3.6.1 Installation and Initial Setup ......................................................................................... 14
3.6.2 Configuring SNMP and Enabling Auto Discovery ...................................................... 15
3.6.3 Setting Up Sensors and Monitoring Metrics................................................................. 15
3.6.4 Real-Time Monitoring and Alerts ................................................................................. 15
3.6.5 Data Visualization and Analysis ................................................................................... 16
RESULTS AND DISCUSSION .................................................................................................. 17
CONCLUSION ............................................................................................................................ 18
1
INTRODUCTION
In today's digital era, efficient and reliable network management is crucial for the seamless
operation of any organization. As businesses expand, the complexity and demands placed on their
network infrastructure grow exponentially. This project, "Office LAN Management with Optical
& Ethernet, Bandwidth Control, and SNMP," aims to address these challenges by implementing
a robust network management solution incorporating cutting-edge technologies.
The backbone of any corporate network lies in its ability to provide rapid data transmission and
seamless connectivity. Optical LAN technology, known for its high data transfer rates and
enhanced reliability, is a pivotal component in modern network infrastructures. By leveraging
optical fibers alongside traditional Ethernet connections, this project seeks to combine the
benefits of both transmission mediums, delivering a hybrid solution that is both efficient and
scalable.
Bandwidth control is another critical aspect of network management that ensures the equitable
distribution of network resources. In a typical office environment, various applications compete
for bandwidth, which can lead to network congestion and reduced performance of critical
services. This project addresses this issue by implementing advanced bandwidth control
techniques that prioritize traffic based on predefined criteria, ensuring that essential applications
maintain optimal performance levels.
A key feature of this project is the integration of a web-based Simple Network Management
Protocol (SNMP) tool. SNMP is a widely used protocol for monitoring and managing network
devices. The SNMP tool implemented in this project provides real-time insights into network
traffic patterns and device performance, enabling network administrators to make informed
decisions and quickly respond to potential issues. This tool offers features such as traffic
monitoring, alert notifications, and detailed reports on network performance, significantly
enhancing the network management capabilities.
This project was undertaken by a team of five dedicated members, each contributing their expertise
in various aspects of the project, from system design and implementation to testing and validation.
By integrating optical and Ethernet technologies, advanced bandwidth management, and a robust
SNMP tool, this project aims to set a new standard in office LAN management, providing a
scalable and reliable network solution for modern enterprises. Extensive testing and validation
ensured the network's resilience under varying traffic conditions. This project also sets a foundation
for future advancements in corporate network management solutions. As businesses continue to
rely more heavily on digital solutions, this project emphasizes the importance of adaptable network
structures. The knowledge and experience gained through this endeavor will serve as valuable
assets in future projects. It represents a proactive approach to meeting the ever-evolving demands
of network infrastructure in today’s fast-paced world.
2
PROJECT DESCRIPTION
The project, "Office LAN Management with Optical & Ethernet, Bandwidth Control, and
SNMP," aims to establish a robust and scalable network infrastructure tailored to the dynamic
needs of small to medium-sized office environments. Utilizing the versatile MikroTik RB941
router, this setup combines optical and Ethernet technologies to deliver high-speed, reliable data
transmission. By leveraging both wired and wireless connections, the network accommodates
various devices and configurations, making it adaptable to future growth and technology
upgrades.
A primary focus of the project is implementing effective bandwidth control to manage network
resources efficiently. Through the MikroTik RB941 router, specific bandwidth limits are set for
each device, ensuring fair allocation and prioritizing essential services. This configuration
reduces the risk of network congestion, providing uninterrupted access to critical applications
and enhancing overall productivity. Bandwidth control plays a pivotal role in maintaining
network stability and allowing seamless operation for multiple users with diverse needs.
In addition to bandwidth management, the project incorporates key network security and
management features. Firewall rules are meticulously configured to secure the network,
preventing unauthorized access and protecting sensitive data. Network Address Translation
(NAT) facilitates smooth internet access across all devices, while precise IP routing optimizes
connectivity for local and remote resources. The inclusion of SNMP (Simple Network
Management Protocol) capabilities further enhances network oversight, enabling real-time
monitoring of device performance and traffic patterns. This SNMP integration equips network
administrators with valuable insights, allowing them to make informed decisions and promptly
address potential issues.
The "Office LAN Management with Optical & Ethernet, Bandwidth Control, and SNMP" project
provides a comprehensive solution that not only meets immediate connectivity requirements but
also prepares the network for future growth. By combining advanced bandwidth management,
security protocols, and SNMP monitoring, this setup delivers a resilient, high-performance LAN
infrastructure suitable for Dhaka’s fast-paced business environment.
3
METHODOLOGY
The methodology outlines the step-by-step approach followed to implement the "Office LAN
Management with Optical & Ethernet, Bandwidth Control, and SNMP" project. Each step is
designed to ensure the effective setup of network components, optimize resource management,
and enhance network monitoring. This section covers the configuration and testing procedures
carried out to build a scalable and secure network infrastructure.
3.1 Hardware Setup and Initial Configuration
The initial setup of the MikroTik RB941 router involves preparing the hardware, accessing the
router’s configuration interface, and establishing basic network settings to ensure connectivity.
This section provides a detailed, step-by-step guide to help us get the router ready for more
advanced configurations.
3.1.1 Powering the Router & Connecting to a Computer
Connect the MikroTik RB941 router to a power source and establish a connection with a PC
for configuration access.
(Figure 2: WinBox interface showing available MikroTik devices for connection by MAC or IP address.)
If everything is ok, we will be logged into the router and can manage things and configure
things according to our preference now. First, we will Adjust the router clock. Setting the router
clock ensures accurate logging, scheduled tasks, security and compliance, and network
synchronization. To do this we need to click on “system>clock” from the left sidebar.
After this, we will see an interface where we can change Time-Zone, Date & Time. We will
change this according to our choice and hit apply.
The next thing we will do is rename the interface to identify each interface without any
hesitation for better management. To do this we will click on “Interfaces” from the left sidebar.
It will show all interface default names. To change it we just need to click on the interface
which name we want to change.
• In the new bridge window, set the Name of the bridge to something descriptive, like
bridge1_LAN, to easily identify it as the main LAN bridge.
• Click Apply and OK to save the bridge configuration. This action creates the bridge
interface but does not yet associate any physical Ethernet ports with it.
To finalize the configuration, ensure both IP addresses appear correctly in the Address List with
the appropriate interfaces (bridge1_LAN and ether1_WAN). This establishes the LAN gateway and
enables the router to communicate with external networks through the WAN interface.
8
• Click on the Plus (+) button to add a new rule. This will open the rule configuration
window.
9
• In the General tab, set Chain to forward, which controls traffic that is being routed
through the router.
• Set Src. Address to the specific IP address we want to allow (e.g., 101.10.10.2,
101.10.10.10, 101.10.10.18, and 101.10.10.20 for individual devices).
• In the Action tab, set Action to accept. This will allow traffic from these specific IP
addresses.
• Click Apply and OK to save each rule.
Adding a Drop Rule for Other Traffic:
After configuring the accept rules, add a final rule to drop any other traffic from the
101.10.10.0/24 network that doesn’t match the previous rules.
• Click the Plus (+) button to add a new rule.
• In the General tab, set Chain to forward and Src. Address to 101.10.10.0/24 (the entire
subnet).
• In the Action tab, set Action to drop. This rule will block any traffic from devices within
the LAN subnet that are not covered by the previously accepted rules.
• Click Apply and OK to save the rule.
These filter rules ensure that only the specified IP addresses (101.10.10.2, 101.10.10.10,
101.10.10.18, and 101.10.10.20) are allowed to forward traffic, while all other traffic from the
subnet 101.10.10.0/24 is blocked. This adds a layer of security by limiting network access to
specific devices.
(Figure 7: Configuring a firewall filter rule in WinBox to allow traffic from the IP address)
10
• In WinBox, navigate to IP > Routes. This opens the Route List window, which
displays current routes and allows us to add new ones.
Create a Default Route:
• Click the Plus (+) button to add a new route.
• In the Dst. Address field, enter 0.0.0.0/0. This is the default route for all traffic
not specifically destined for internal IPs, covering any destination.
• Set the Gateway to the IP address of the next hop, which is typically the upstream router or
ISP gateway IP. In this example, we enter 192.168.0.1, the gateway for ether1_WAN.
• Click Apply and OK to save the configuration.
With this default route, any traffic from the LAN intended for external networks will be
directed through ether1_WAN using 192.168.0.1 as the gateway. This setup enables internet
access for devices on the local network.
(Figure 8: Adding a default route (0.0.0.0/0) to forward traffic through the WAN gateway (192.168.0.1)
in WinBox.)
11
• In the WinBox menu, go to Queues. This will open the Queue List window, where
we can add and manage bandwidth control rules.
Adding a New Queue:
• Click on the Plus (+) icon to add a new queue for bandwidth management. This opens
the Simple Queue configuration window, where we can define the bandwidth limits.
Setting Basic Queue Information from the General tab:
• Name: Enter a name for the queue (e.g., "Farabi") to identify the device or user.
• Target: Set the target IP address of the device for which we want to control bandwidth
(e.g., 101.10.10.10 for Farabi’s device). This ensures that the bandwidth limits only
apply to this specific IP address.
Configuring Bandwidth Limits:
• Target Upload: Set the maximum upload speed for the device. For example, we
might set this to 15M to allow a maximum upload speed of 15 Mbps.
• Target Download: Set the maximum download speed. For instance, setting 10M
limits the device's download speed to 10 Mbps.
These values ensure that the selected device cannot exceed these speed limits, preventing
network congestion and ensuring that other users have access to sufficient bandwidth.
Burst Settings (Optional):
For advanced control, we can configure burst settings to allow temporary speed boosts for
devices when bandwidth is available:
• Burst Limit: Set the burst speed for download and upload (e.g., unlimited to allow a
temporary speed increase).
• Burst Threshold: Define the threshold at which bursting begins. For example, setting it
to 5M means the burst will activate when the usage stays below 5 Mbps.
• Burst Time: Set the duration of the burst. A higher value allows the device to enjoy
faster speeds for a longer period when bandwidth is available.
12
• Once we have entered all the desired settings, click Apply and OK to save the queue.
This rule will now appear in the Queue List and will be actively controlling the
bandwidth for the specified device.
Repeating for Additional Devices:
• Repeat the above steps to create queues for other devices as needed. For instance, we
might set up queues for other users, such as "Mili" with a 10M limit, "Ramisha" with
5M, "Faysal" with 1M, and "Mashrika" with 2M.
By implementing these queues, we control the upload and download speeds for each device,
ensuring fair bandwidth distribution across the network. This setup is particularly useful in
office or home environments where multiple users need reliable internet access without one
device hogging the bandwidth.
(Figure 9: Configuring bandwidth limits for devices in WinBox using Simple Queue settings)
• From a device connected to the LAN (such as a computer or mobile device on the same
network as bridge1_LAN), open the command prompt (on Windows) or terminal (on
macOS/Linux).
• Use the ping command to test connectivity to the LAN gateway. For example:
ping 101.10.10.1
• A successful ping indicates that devices on the LAN can communicate with the router,
confirming the LAN setup is correct.
(Figure 10: Verifying LAN connectivity by pinging the router’s LAN IP 101.10.10.1)
We see that we are getting a response from the ping command, indicating successful
connectivity. This response confirms that our LAN and WAN configurations are correctly set
up, allowing internal devices to communicate with the router and access external networks. The
positive ping results from both LAN and WAN interfaces signify that the routing and NAT
rules are functioning as intended, ensuring seamless data flow between the internal network and
the internet. This verification step is essential as it confirms that devices on the local network
can reliably reach external resources, completing our initial connectivity setup.
3.6 SNMP Integration
To enhance network monitoring capabilities, PRTG Network Monitor was integrated with the
MikroTik RB941 router using SNMP. This setup provided a centralized platform for real-time
monitoring, alerting, and data visualization, which greatly assisted in maintaining and
troubleshooting the network.
3.6.1 Installation and Initial Setup
PRTG was downloaded from the official Paessler website, where a free trial version was
available for testing. After downloading, the software was installed on a Windows-based
server/pc, which would serve as the monitoring station. Upon launching PRTG, the web
dashboard was accessed using the default username and password provided by PRTG.
15
In conclusion, integrating PRTG with SNMP on the MikroTik router provided a comprehensive
and effective monitoring solution. The setup allowed for detailed oversight of network activity,
proactive alerts, and insightful data analysis, ensuring a reliable and well-managed network
environment.
17
CONCLUSION
Summary of Findings
This project successfully implemented a comprehensive LAN management solution using the
MikroTik RB941 router, achieving the primary objectives of network stability, bandwidth
control, and real-time traffic monitoring. The system provided a robust platform for office
network management, enabling efficient distribution of resources, secure access control, and
enhanced visibility into network performance. The results validated the feasibility of deploying
this solution in a small to medium-sized office setup, where reliable network management is
essential for daily operations.
Achievements of Project Objectives
Each project objective was accomplished, reflecting the capability of the MikroTik RB941 to
handle office network requirements effectively. The router’s performance met the demands of
the setup, with smooth integration of both LAN and WAN configurations. The SNMP tool’s
success in monitoring traffic highlighted the system’s ability to track and respond to network
events, while bandwidth control ensured fair access for all users. Together, these features
contribute to a well-rounded, manageable network environment that fulfills the practical needs
of modern office infrastructure.
Recommendations for Future Work
While the system met current needs, there are several potential improvements for future iterations
of this project. Implementing advanced security protocols, such as VPNs and additional firewall
rules, could further enhance network security, particularly in larger or more sensitive environments.
Additional monitoring tools could be considered to extend the analytical capabilities of the
network, providing deeper insights into traffic trends and potential security threats. Fine-tuning
bandwidth control options could also provide more flexible and customizable allocation strategies,
adapting the network more precisely to user needs and application types.
In conclusion, the MikroTik RB941 router offers a cost-effective and efficient solution for office
LAN management. With further development, this setup could provide even greater adaptability,
security, and performance, making it a scalable option for larger network environments as well.